Senior Auditor IT & Security Audit Job📣 إعلان

About the Opportunity

Elm Company is seeking a Senior Auditor IT & Security Audit to join our team in Riyadh, Saudi Arabia. This is a full-time position requiring 5-10 years of relevant experience. The role is central to executing information technology and security audit engagements, providing independent assurance on critical organizational functions.

Key Purpose of the Role

The Senior Auditor is responsible for delivering independent assurance on the effectiveness of governance, risk management, cybersecurity, and internal controls across Elm Company. This involves supporting the approved internal audit plan by conducting risk-based reviews, identifying control weaknesses, and evaluating compliance with applicable standards and regulations. The role is instrumental in recommending practical improvements to enhance the organization's control environment and operational resilience.

Core Audit Responsibilities

• Execute IT and cybersecurity audit engagements in accordance with the approved audit plan.
• Perform audit testing and evaluate the effectiveness of technology controls.
• Document audit findings and supporting evidence thoroughly.
• Assess risks related to information systems, infrastructure, applications, and cybersecurity.
• Identify control gaps and recommend opportunities for improvement.
• Evaluate the effectiveness of risk mitigation measures.

Compliance, Reporting, and Follow-Up

• Review compliance with internal policies, regulatory requirements, and technology standards.
• Assess IT General Controls (ITGCs) and automated controls.
• Evaluate the effectiveness of governance and security controls.
• Prepare clear audit observations and comprehensive reports.
• Communicate findings and recommendations effectively to stakeholders.
• Support the closure and resolution of identified audit issues.
• Track corrective action plans and validate the implementation of agreed actions.
• Report the status of outstanding audit observations.

Strategic Engagement and Development

• Participate in reviews covering cybersecurity, system access, change management, and data protection controls.
• Support audits of digital products, applications, and technology initiatives.
• Coordinate effectively with business and technology teams during audit engagements.
• Maintain strong working relationships with all stakeholders and facilitate information gathering and discussions.
• Contribute to the enhancement of audit methodologies and practices.
• Support the use of data analytics and technology-enabled auditing techniques to improve efficiency and effectiveness.

Adherence to Policies and Standards

• Follow all relevant departmental policies, processes, standard operating procedures, and instructions to ensure work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to maintain a healthy and safe work environment.
• Adhere to all relevant information security practices and standards to ensure data integrity and confidentiality.